c61d66555d64ab6ea7a59a5401f03005d709daa3461bfaf35cd870b05fef9ecf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c61d66555d64ab6ea7a59a5401f03005d709daa3461bfaf35cd870b05fef9ecf
Size

160KB
MD5

54f5fc5bc72a5c948277cba6c73501ec
SHA1

8c29f8d4eb8fb8c7c19d38c0893816e1a2a83da3
SHA256

c61d66555d64ab6ea7a59a5401f03005d709daa3461bfaf35cd870b05fef9ecf
SHA512

01a1ee63eb686f0b83d018304a65d94c9ef606b5174c8676572055944406647028522b8f9b8dd12316c2c79612932fd34487ad57da0bdbaa972ddde7798a78ec
SSDEEP

1536:Zg/TRq7GAmE71DbE71vbmqP9Mdzyde60VrYbxOeYhEL2n:i/Tw7GAFpD4vCSQzyde6gQRtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c61d66555d64ab6ea7a59a5401f03005d709daa3461bfaf35cd870b05fef9ecf

Files

c61d66555d64ab6ea7a59a5401f03005d709daa3461bfaf35cd870b05fef9ecf
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 867KB - Virtual size: 867KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 812KB - Virtual size: 811KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dmm
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ